Lucene search
+L

46042 matches found

OSV
OSV
added 2026/07/23 11:42 a.m.13 views

CVE-2026-65606 SiYuan before v3.7.2 Cross-Site Scripting to RCE

SiYuan before v3.7.2 contains a cross-site scripting vulnerability in the siyuan:// protocol handler. When a siyuan://plugins/ link references a name that is not an installed plugin, the application opens a custom tab and inserts the link's icon parameter into the tab header via innerHTML without...

9.4CVSS5.1AI score
SaveExploits0References5
OSV
OSV
added 2026/07/23 11:42 a.m.8 views

CVE-2026-65605 SiYuan before v3.7.2 Stored XSS to RCE via Attribute View

SiYuan before v3.7.2 contains a stored cross-site scripting vulnerability in Attribute View database cell rendering. A Template column value is rendered as HTML via text/template without auto-escaping, and EscapeHTML is only applied when HasUnclosedHtmlTag returns true; because balanced...

9.4CVSS5.1AI score
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/07/23 11:42 a.m.10 views

CVE-2026-65605 SiYuan before v3.7.2 Stored XSS to RCE via Attribute View

SiYuan before v3.7.2 contains a stored cross-site scripting vulnerability in Attribute View database cell rendering. A Template column value is rendered as HTML via text/template without auto-escaping, and EscapeHTML is only applied when HasUnclosedHtmlTag returns true; because balanced...

9.6CVSS5.8AI score0.00516EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/23 11:41 a.m.8 views

PYSEC-2026-3473 LangBot: Authenticated RCE Via MCP Configuration

Summary Any authenticated user can achieve arbitrary command execution on the LangBot servers through changing the MCP Server Configuration by added an "STDIO" MCP with an arbitrary command. Details The repository uses StdioServerParameters which is based on Anthropic's modelcontextprotocol open...

8.8CVSS6.6AI score
SaveExploits0References5
OSV
OSV
added 2026/07/23 11:41 a.m.10 views

PYSEC-2026-3517 PraisonAI: Missing Authentication for Critical Function and Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in praisonai

Unauthenticated PraisonAI UI MCP connect endpoint executes attacker-chosen local commands Summary PraisonAI v4.6.48 exposes the PraisonAIUI MCP client management API through the default UI host apps without authentication. A remote unauthenticated client can send POST /api/mcp/connect with a...

9.8CVSS6.4AI score
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/07/23 11:8 a.m.4 views

gitpython: GitPython: Arbitrary code execution via command injection due to unguarded Git options

A flaw was found in GitPython where it fails to properly sanitize dangerous Git options. This vulnerability allows an attacker to inject arbitrary commands when using functions like Repo.archive and git.lsremote, potentially leading to arbitrary code execution. Additionally, functions such as...

8.6CVSS5.9AI score0.01016EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/23 12:0 a.m.20 views

PT-2026-64167

gpsd through release-3.27.5, fixed at commit 4c06658, contains a code injection vulnerability in the gpsprof utility that allows an attacker who controls GPS input data to execute arbitrary OS commands by injecting malicious content into the SKY.satellites.used field, which is inserted unsanitize...

8.5CVSS6.3AI score0.00174EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/07/23 12:0 a.m.44 views

PT-2026-64164

Name of the Vulnerable Software and Affected Versions AWS Bedrock AgentCore Python SDK versions prior to 1.18.1 Description Improper neutralization of argument delimiters in the install packages method allows a remote authenticated user to execute arbitrary commands within the Code Interpreter...

8.4CVSS6.2AI score0.00327EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
added 2026/07/23 12:0 a.m.9 views

SUSE SLES12 Security Update : joe (SUSE-SU-2026:3196-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:3196-1 advisory. This update for joe fixes the following issue - CVE-2026-13412: arbitrary command execution via malicious tags file bsc1269379. Tenable has extracted t...

6AI score
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2026/07/22 10:10 p.m.35 views

n8n: Expression sandbox escape via arrow-function bodies enabling command execution

Impact An authenticated user with permission to create or modify workflows could abuse crafted expressions using arrow functions to bypass the expression sandbox, triggering unintended system command execution on the host running n8n. Patches The issue has been fixed in n8n versions 2.31.5 and...

5.7AI score
SaveExploits0References5Affected Software1
OSV
OSV
added 2026/07/22 10:10 p.m.32 views

GHSA-GV7G-JM28-CR3M n8n: Expression sandbox escape via arrow-function bodies enabling command execution

Impact An authenticated user with permission to create or modify workflows could abuse crafted expressions using arrow functions to bypass the expression sandbox, triggering unintended system command execution on the host running n8n. Patches The issue has been fixed in n8n versions 2.31.5 and...

8.7CVSS5.8AI score0.00371EPSS
SaveExploits0References5
OSV
OSV
added 2026/07/22 5:55 p.m.8 views

GHSA-X5VX-C2C8-M3W9 n8n: AI Agents Project Viewer Privilege Escalation via run_node_tool

Impact In n8n's AI Agents feature, a user with the read-only Project Viewer role could escalate their privileges by chatting with an agent that has node tools enabled. The agent's node-execution tool was authorized only by the agent:execute scope and ran nodes using the project's credentials,...

7.2CVSS6.4AI score0.00324EPSS
SaveExploits0References6
SUSE Linux
SUSE Linux
added 2026/07/22 2:34 p.m.7 views

Security update for joe

This update for joe fixes the following issue CVE-2026-13412: arbitrary command execution via malicious tags file bsc1269379. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the comma...

8.5CVSS5.8AI score
SaveExploits0References4
OSV
OSV
added 2026/07/22 2:34 p.m.3 views

SUSE-SU-2026:3196-1 Security update for joe

This update for joe fixes the following issue - CVE-2026-13412: arbitrary command execution via malicious tags file bsc1269379...

5.8AI score
SaveExploits0References3
NVD
NVD
added 2026/07/22 2:17 p.m.12 views

CVE-2026-62145

A vulnerability in Check Point Gaia Portal allows an authenticated attacker with read-only Gaia Portal privileges to execute commands with root privileges...

7.5CVSS0.0754EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/22 2:17 p.m.71 views

CVE-2026-62144

An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative commands on the Management Server. Successful exploitation may also allow command execution on managed Security...

9.1CVSS0.20623EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/22 1:53 p.m.8 views

EUVD-2026-47702

A vulnerability in Check Point Gaia Portal allows an authenticated attacker with read-only Gaia Portal privileges to execute commands with root privileges...

7.5CVSS5.5AI score0.0754EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/22 1:53 p.m.270 views

CVE-2026-62144

CVE-2026-62144 describes an authentication bypass in Check Point’s Security Management and Multi-Domain Security Management Server. An unauthenticated attacker can run administrative commands on the Management Server, with possible command execution on connected Security Gateways. Exploitation re...

9.1CVSS6.1AI score0.20623EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/22 12:6 p.m.26 views

CVE-2026-44192

CVE-2026-44192 affects the Ansible Lightspeed Model Context Protocol (MCP) server. The vulnerability is a path traversal flaw that can be triggered to manipulate an AI agent via indirect prompt injection, allowing writing of files to unauthorized locations on the user’s system, which may expose s...

6.6CVSS5.7AI score0.00149EPSS
SaveExploits0References2
Nuclei
Nuclei
added 2026/07/22 4:31 a.m.199 views

Oracle WebLogic Server - Remote Command Execution

The Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent - WLS Security is susceptible to remote command execution. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. This easily exploitable vulnerability allows unauthenticated attacke...

7.5CVSS8.4AI score0.99993EPSS
SaveExploits45References5
Rows per page
Query Builder